EventLoom – Privacy Policy

EventLoom is a UK-based company developing audio and lighting control systems for events. For the purposes of UK GDPR, we are the “controller” of personal data collected through our website and sales processes.

• Company: EventLoom (Company No. TBC)
• Website: https://www.eventloomtech.com
• Registered office: Available on request

We aim to collect the minimum information needed to operate our business.

2.1 Website enquiries

If you contact us (for example, via a form or email), we may collect:

• Your name
• Your email address
• Any information you include in your message
• Basic technical data such as IP address and browser information (as part of normal website operation and security logging)

2.2 Purchases

If you purchase from us, we may collect and store:

• Name and contact details
• Billing address (and delivery address if applicable)
• Business/venue name (if provided)
• Transaction details (what you purchased, dates, amounts, and invoice records)

Payment card details are processed by our payment provider(s). We do not store full card numbers or card security codes.

2.3 Device operation

EventLoom devices are designed to operate locally on private networks. They do not transmit audio, guest identities, or usage telemetry to EventLoom.

To function on a local network, devices may process information such as:

• Local network IP addresses
• Bluetooth / AirPlay device names (as shown by connected devices on the local network)
• Names of locally stored audio files (e.g., uploaded MP3 filenames)
• Local system logs for diagnostics on the device

This information remains on the device unless you choose to share it with us (for example, by sending support screenshots or logs by email).

We use personal data for the following purposes:

• To respond to enquiries and provide information you request
• To fulfil orders, deliver products, and provide invoices/receipts
• To provide customer support when you contact us
• To comply with legal obligations (e.g., accounting and tax)
• To protect our website and business from fraud and abuse

We do not sell personal data.

We process personal data under one or more of the following lawful bases:

• Contract – where processing is needed to fulfil an order or provide support.
• Legitimate interests – such as operating our business, responding to enquiries, securing our website, and preventing fraud (balanced against your rights).
• Legal obligation – where we must keep records for tax/accounting or comply with law.
• Consent – if we ever send marketing emails or enable optional analytics, we will rely on consent where required and you can withdraw it.

We share personal data only where needed to run our business, for example with:

• Payment processors / merchant of record (to process payments and manage taxes/VAT if applicable)
• Email and productivity providers (to communicate with you and store business correspondence)
• Shipping and logistics providers (if physical delivery is required)
• Professional advisers (accountants/legal) where necessary
• Hosting providers (to run the website)

Where third parties act as processors, we take steps to ensure appropriate contractual safeguards are in place.

We keep personal data only as long as necessary:

• Enquiry emails/messages: typically up to 24 months (unless ongoing discussions require longer)
• Purchase and invoice records: typically 6 years (UK tax/accounting requirements)
• Support correspondence: as long as needed to address the issue, then retained for a reasonable period

Device logs remain on the device unless you decide to share them with us.

We use appropriate technical and organisational measures to protect personal data, including access controls and secure systems. No method of storage or transmission is 100% secure, but we work to reduce risks and respond appropriately if issues arise.

Under UK GDPR you have rights including:

• Access – request a copy of your personal data
• Rectification – correct inaccurate or incomplete data
• Erasure – request deletion in certain circumstances
• Restriction – limit processing in certain circumstances
• Objection – object to processing based on legitimate interests
• Data portability – receive certain data in a portable format

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

We use essential cookies as required for basic website operation. If we use non-essential cookies (for example, analytics), we will provide appropriate notices and choices.

We may update this policy from time to time. The “Effective date” at the top indicates when the latest version applies.

If you have questions or want to exercise your rights, contact:

EventLoom
Email: privacy@eventloom.co.uk
Address: Available on request